In upgrader, use spec not cfg to determine allowed items.

The upgrader deals with deprecated items that may not exist in the
sparse parsed config file.